5421 matches found
CVE-2019-6296: Improper Neutralization of Special Elements used in an SQL Command
Cleanto 5.0 has SQL Injection via the assets/lib/exportajax.php id parameter...
SUSE SLED12 / SLES12 Security Update : sssd (SUSE-SU-2019:0081-1)
This update for sssd provides the following fixes : This security issue was fixed : CVE-2018-10852: Set stricter permissions on /var/lib/sss/pipes/sudo to prevent the disclosure of sudo rules for arbitrary users bsc1098377 The update package also includes non-security fixes. See advisory for...
MGASA-2018-0495 Updated python packages fix security vulnerabilities
Possible denial of service vulnerability due to a missing check in Lib/wave.py to verify that at least one channel is provided CVE-2017-18207. Python's elementtree C accelerator failed to initialise Expat's hash salt during initialization. This could make it easy to conduct denial of service...
CVE-2018-20579
Contiki-NG before 4.2 has a stack-based buffer overflow in the push function in os/lib/json/jsonparse.c that allows an out-of-bounds write of an '' or '' character...
CVE-2018-1000631: Improper Neutralization of Special Elements used in an SQL Command
Battelle V2I Hub 3.0 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements to the tmx/TmxCtl/src/lib/PluginStatus.cpp and TmxControl::userinfo function, which could allow the attacker to view, add, modify or delete information in the back-end database...
PT-2018-15449
Name of the Vulnerable Software and Affected Versions Contiki-NG versions prior to 4.2 Description The issue is a stack-based buffer overflow in the push function located in os/lib/json/jsonparse.c. This overflow allows an out-of-bounds write of an '' or '' character. Recommendations For versions...
DEBIAN-CVE-2018-20023
LibVNC before 8b06f835e259652b0ff026898014fc7297ade858 contains CWE-665: Improper Initialization vulnerability in VNC Repeater client code that allows attacker to read stack memory and can be abuse for information disclosure. Combined with another vulnerability, it can be used to leak stack memor...
PT-2018-15138 · Freeware Advanced Audio Coder · Faac
Name of the Vulnerable Software and Affected Versions: FAAC version 1.29.9.2 Description: A memory address dereference issue was found in the huffcode function, located in libfaac/huff2.c, which can cause a segmentation fault and application crash. This results in a denial of service, specificall...
Emacs movemail Privilege Escalation
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Emacs movemail Privilege Escalation', 'Description' = %q This module exploits a SUID installation of the Emacs movemail utility to run a command ...
Emacs - movemail Privilege Escalation Exploit
This Metasploit module exploits a SUID installation of the Emacs movemail utility to run a command as root by writing to 4.3BSD's /usr/lib/crontab.local. The vulnerability is documented in Cliff Stoll's book The Cuckoo's Egg. This module requires Metasploit: https://metasploit.com/download Curren...
CVE-2018-19796: URL Redirection to Untrusted Site
An open redirect in the Ninja Forms plugin before 3.3.19.1 for WordPress allows Remote Attackers to redirect a user via the lib/StepProcessing/step-processing.php aka submissions download page redirect parameter...
PT-2018-15098
Name of the Vulnerable Software and Affected Versions Ninja Forms plugin versions prior to 3.3.19.1 Description The issue is related to an open redirect that allows remote attackers to redirect a user. This is achieved via the "lib/StepProcessing/step-processing.php" submissions download page,...
CVE-2018-19205
Roundcube before 1.3.7 mishandles GnuPG MDC integrity-protection warnings, which makes it easier for attackers to obtain sensitive information, a related issue to CVE-2017-17688. This is associated with plugins/enigma/lib/enigmadrivergnupg.php...
CVE-2018-19115
keepalived before 2.0.7 has a heap-based buffer overflow when parsing HTTP status codes resulting in DoS or possibly unspecified other impact, because extractstatuscode in lib/html.c has no validation of the status code and instead writes an unlimited amount of data to the heap...
CVE-2018-19115: Out-of-bounds Write
keepalived before 2.0.7 has a heap-based buffer overflow when parsing HTTP status codes resulting in DoS or possibly unspecified other impact, because extractstatuscode in lib/html.c has no validation of the status code and instead writes an unlimited amount of data to the heap...
CVE-2014-10077: Improper Input Validation
Hashslice in lib/i18n/coreext/hash.rb in the i18n gem before 0.8.0 for Ruby allows remote attackers to cause a denial of service application crash via a call in a situation where :somekey is present in keepkeys but not present in the hash...
CVE-2018-18942: Unrestricted Upload of File with Dangerous Type
In baserCMS before 4.1.4, lib\Baser\Model\ThemeConfig.php allows remote attackers to execute arbitrary PHP code via the admin/themeconfigs/form dataThemeConfiglogo parameter...
WS-2018-0668
ovs in versions v2.6.0 to v2.10.1 is vulnerable to Heap-buffer-overflow in Heap-buffer-overflow in ofpbufinsert, related to lib/ofpbuf.c...
Linux systemd Symlink Dereference Via chown_one() Exploit
Linux suffers from an issue with systemd where chownone can dereference symlinks. systemd: chownone can dereference symlinks CVE-2018-15687 I am sending this bug report to Ubuntu, even though it's an upstream bug, as requested at...